keybase / keybase/keybase-issues

keybase email servers do not use ssl

Open
#582 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

When I write a mail to `hannes@keybase dot io`, there is no SSL connection established to my mail server... (mails from `notify@` do use a different mail server and TLS):

```
Received: from mail1.keybase.io (mail1.keybase.io [54.84.192.51])
by mail.mehnert.org (Postfix) with ESMTP id 81917143C
for ; Sun, 6 Apr 2014 11:34:14 +0200 (CEST)
```

(`notify@` uses TLS):

```
Received: from a8-95.smtp-out.amazonses.com (a8-95.smtp-out.amazonses.com [54.240.8.95])
(using TLSv1 with cipher AES256-SHA (256/256 bits))
(Client did not present a certificate)
by mail.mehnert.org (Postfix) with ESMTPS id DADD72CFA
for ; Mon, 7 Apr 2014 14:57:50 +0200 (CEST)
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by investigating the mail1.keybase.io delivery path and compare it with the notify@ path shown in the supplied headers. Done means the relevant Keybase mail server behavior is understood and outbound mail to reported recipients establishes TLS, with the result verified using mail headers.

Written by the indexing model from the issue text.

Assessment

Domain
infrastructure, networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.